Congress Wants to Tighten Rules on Secret Surveillance—Here's What That Means

Congress has just introduced a new bill aimed at controlling how U.S. intelligence agencies conduct surveillance. This comes only months after lawmakers approved a law that kept a major surveillance program running for two more years—but with new restrictions attached.

The program in question, called Section 702, lets the CIA, NSA, FBI, and other agencies collect and examine huge amounts of communications from people living outside the United States. No warrant is required. The new restrictions try to prevent these agencies from using that same data to secretly investigate Americans.

What Happened Last Spring

In April 2024, Congress passed a law called RISAA that renewed Section 702 for two more years. It also added new rules, especially for the FBI. Now, before FBI agents search the surveillance database, they need approval from supervisors, and the searches have to be carefully logged.

The core issue: when U.S. intelligence agencies collect communications from overseas, they inevitably scoop up some messages involving Americans—either because an American was talking to someone abroad, or because the message traveled through U.S. phone lines. For years, the FBI could search through all that data looking for Americans without getting a warrant. Privacy advocates called this a "backdoor" into Americans' private communications. The new law tries to stop that.

The Director of National Intelligence released an updated handbook in 2024 explaining these legal changes. It shows how the intelligence landscape is always shifting.

How Section 702 Actually Works

Section 702 started in 2008. It gives the government permission to target communications from non-U.S. persons living outside America. To make this work, U.S. phone and internet companies help agencies collect the data as it flows through their networks.

Here is a simple way to think about it: imagine the government wants to monitor phone calls of a suspected foreign terrorist abroad. To reach that person's calls, it has to monitor thousands of calls flowing through U.S. telephone networks. Some of those calls will be between Americans. Those unintended American communications are what the law calls "incidental collection"—though privacy advocates point out it is really warrantless surveillance of Americans.

New Oversight and Reporting Rules

The April 2024 law created new checks. The Department of Justice's internal watchdog, the Inspector General, must now investigate how the FBI uses Section 702 data. That report is due by late 2025, and Congress will see it.

This push for transparency picked up steam after the Director of National Intelligence testified before Congress in March 2024, when lawmakers asked pointed questions about how these surveillance powers are used.

The Real-World Impact on Intelligence Work

The new approval rules will slow down FBI investigations. Before, agents could quickly search the database. Now they need sign-off from a supervisor and must document everything.

Analysis: This is a familiar tension. Intelligence agencies argue that extra steps make it harder to spot genuine national security threats. Privacy advocates argue that some friction is worth it to prevent the government from investigating Americans without a warrant. Both sides have a point.

The two-year renewal was also unusually short. Normally, Congress approves surveillance powers for longer periods. But this time, lawmakers were reluctant to hand out longer authority without seeing real changes first. This shorter timeline may become the new pattern.

Why Congress Isn't Done Yet

The fact that a new bill has been introduced already—just months after the April law passed—shows Congress still wants more controls. Lawmakers are increasingly skeptical that intelligence agencies will police themselves.

Technology has changed a lot since 2008, when Section 702 started. Cloud storage, encrypted messaging, and international data flows work differently now. The old rules may not fit the modern reality. Tech companies that help the government with surveillance are facing a shifting target of legal requirements.

Worth flagging: If Congress keeps shortening how long these powers last, and keeps adding restrictions, intelligence agencies and tech companies will face constant uncertainty. We might be entering a new era where surveillance powers have to be re-argued and renewed every couple of years instead of being locked in for a decade.

The introduction of this new bill signals that the April changes may only be the start. Privacy advocates and tech companies are watching to see whether Congress will go further.

What Comes Next

Congress is likely to keep revisiting these surveillance rules over the next two years. The Inspector General's report on FBI searches, due late 2025, will probably influence the next big debate about whether Section 702 should be renewed again—and under what terms.

In this author's view: The pattern emerging here—short reauthorizations paired with gradual tightening of rules—may be the future. As technology gets more powerful and invasive, and as the public becomes more aware of surveillance, Congress is finding it harder to simply rubber-stamp these authorities. That friction between security and privacy is unlikely to disappear.